CVE-2026-49922 is a high-severity vulnerability in the queryRemoteConnectionServices method of ConnectionServiceWrapper.java. It involves a possible permission bypass caused by a confused deputy issue, allowing local privilege escalation without requiring additional execution privileges or user interaction.